RMACreateInstance
RMAShutdown
SetDLLAccessPath
Static task
static1
Behavioral task
behavioral1
Sample
524657f0dfc915c392303e7d457fbdeec79f858ccb82bbd59a608a9fa2db344b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
524657f0dfc915c392303e7d457fbdeec79f858ccb82bbd59a608a9fa2db344b.dll
Resource
win10v2004-20220812-en
Target
524657f0dfc915c392303e7d457fbdeec79f858ccb82bbd59a608a9fa2db344b
Size
148KB
MD5
4b93d7938c9eeb5633d49e60bc8445e1
SHA1
1bbe2c8e284f0ab68fc0cb7bdc83cae815360eab
SHA256
524657f0dfc915c392303e7d457fbdeec79f858ccb82bbd59a608a9fa2db344b
SHA512
08eb2da4fe09ee057b1aaf25c7fe85fca9f6af7abd1db04c5eca95f43fa62a916b64fba4cb3411207a4f9a8f888d10671174925da76b2530aa689f43cb84d5c3
SSDEEP
3072:17jY1OTeijHd2S1VbLITU9+WLsV08C61l5qVUu:21ajZPr9yV08t1yO
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
sprintf
_onexit
_initterm
_adjust_fdiv
malloc
realloc
free
_stricmp
__dllonexit
_putenv
strstr
??2@YAPAXI@Z
strrchr
printf
rand
_purecall
??3@YAXPAX@Z
strchr
DisableThreadLibraryCalls
MultiByteToWideChar
SetErrorMode
FreeLibrary
LoadLibraryA
GetCurrentProcessId
WideCharToMultiByte
GetProcAddress
InterlockedDecrement
InterlockedIncrement
MessageBoxA
GetWindowThreadProcessId
FindWindowExA
ClientToScreen
GetWindowRect
GetLastActivePopup
GetActiveWindow
GetSystemMetrics
CharNextA
RMACreateInstance
RMAShutdown
SetDLLAccessPath
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE